Michael Kinloch

The debate on software quality touches on a crucial point that I experienced alongside prominent engineers like Watts Humphrey, Dieter Rombach , Dan Burton, and Jürgen Münch, when we investigated the effectiveness of "Teaching Disciplined Software Development." https://lnkd.in/ep94MUJR Students rarely internalize disciplined software development at individual and collaborative levels during their studies. Consequently, they feel overwhelmed by its complexity and tend to avoid applying these principles professionally. An alternative for tackling this situation begins in university education or industry training. The challenge is to design more realistic training scenarios, which are closer to industrial settings. Software engineering courses must strengthen self-management skills so students can: - Overcome resistance to following structured quality practices, no matter the time pressure, because it is part of their DNA. - Embrace teamwork as an essential methodology - Develop a genuine commitment to quality #software #softwareengineering

29

1 Comment

🚨 𝗙𝗶𝗻𝗢𝗽𝘀 𝗔𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗼𝗻 𝗜𝘀 𝗡𝗼𝘄 𝗢𝗽𝗲𝗻 𝗦𝗼𝘂𝗿𝗰𝗲 – 𝗡𝗼 𝗠𝗼𝗿𝗲 𝗘𝘅𝗰𝘂𝘀𝗲𝘀, 𝗢𝗻𝗹𝘆 𝗘𝘅𝗲𝗰𝘂𝘁𝗶𝗼𝗻 Cloud cost savings aren’t stuck behind vendor lock-in anymore. Now you hold the keys. 🔍𝗧𝗛𝗘 𝗗𝗘𝗘𝗣 𝗗𝗜���𝗘 ⭕ Internal tools waste time – Most teams spend months building DIY cost automation that never scales. ⭕ Off-the-shelf tools don’t flex – One-size-fits-none. They don’t adapt to your org’s real-world chaos. ⭕ OpenOps fixes both – No-code. Fully customizable. Built for FinOps teams who move fast and think deeper. 🤔 𝗪𝗛𝗬 𝗜𝗧 𝗠𝗔𝗧𝗧𝗘𝗥𝗦 Ever been told to "optimize costs" with a dashboard that dumps a thousand alerts? You end up manually tagging, scripting, and begging approvals… all while the spend bleeds. OpenOps flips the script—so optimization is proactive, not reactive. 🚀 𝗬𝗢𝗨𝗥 𝗡𝗘𝗫𝗧 𝗦𝗧𝗘𝗣𝗦 Start exploring how OpenOps can automate your biggest FinOps pain points today. Read further with this link: https://lnkd.in/gJ_8S2kw #cloudcostsavings #cloudengineering #finops #cloudcomputing

28

3 Comments

quite a lot of debate flairing up about kubernetes performance and cost vs. bare metal micro vms. interesting to see how some of the high tech startups are pivoting to this to reduce cost and complexity. whats your thoughts on this? https://lnkd.in/eFhwmEYK

11

1 Comment

Developers continually invest significant time in updating applications with the latest patches to address security vulnerabilities. In the realm of IT, applications comprise numerous dependent libraries which can harbour hundreds to thousands of vulnerabilities, posing a considerable challenge for teams striving to balance customer delivery with application security. Recently, we introduced an enterprise solution that streamlines the patching process for microservices, freeing up teams to focus on their core tasks of serving customers. This innovative solution involves: - Updating the application to the latest secure container - Updating the application libraries - Utilizing Snyk to identify and address dependency vulnerabilities - Conducting non-production deployment and testing - Initiating and approving a change request via service-now - Implementing a canary deployment strategy, gradually increasing traffic from 1% to 50% - Monitoring logs for anomalies during the canary phase - Swiftly reverting changes in case of errors or proceeding with full deployment This approach empowers teams to better manage their schedules, ensures applications are consistently updated, and enhances our security posture without the extensive time commitment previously demanded. It's a significant achievement for the team, marking a substantial improvement in our operational efficiency. Great job, team! #OperationalEfficiency #ApplicationSecurity #InnovativeSolutions

72

3 Comments

How do we find scalable ways to build, impactful ways to lead and robust models to secure.   That was my recent focus, to reset, and refresh with a set of learning courses and certifications to challenge existing thinking, uplift existing certifications and ensure I can support our teams in the best way. I chose the x3 courses below over Oct/Nov (now all completed) to deliver that:   - AWS Certified Solutions Architect - DevOps Institute Certified DevOps Leader - ISC2 Certified Information Systems Security Professional (CISSP) I'd love your thoughts on what i should pick up next year to continue this journey, which course have you recently completed thats left a positive impression / impact? Key reminders / takeaways from each:   ☁️ AWS Certified Solutions Architect 🔑 Design for Resilience, Not Recovery. Using cloud-native approaches (like the AWS Well Architected framework) to building fault-tolerant systems from day one looking at what will happen 'when' not 'if' a fault occurs - as we're doing inside our engineering teams at Natwest 🔑 Cost & Operational Control is a Design Pillar. Optimizing for cost, security and operational delivery is a continuous architectural duty. It means selecting the right service (a lot of emphasis in the course on right-sizing service choices) eliminating undifferentiated heavy lifting.   👥 DevOps Institute DevOps Leader 🔑 Culture is the biggest Enabler. It’s a shift built on psychological safety, shared goals, and breaking down organizational silos. Some great reminders in this course on stakeholder and team engagement models, different organisational culture norms and levers to help shift 🔑 Focus on Flow, Not Just Speed. The goal isn't just to be fast but to look holistically at the value stream to eliminate waste, reduce handoffs and challenge queue time. Something we've taken to heart in our Route to Live simplification engineering work.   🛡️ ISC2 Certified Information Systems Security Professional 🔑 Security is everyone's priority. A useful reminder of the wider aspects of security from a purely technical software discipline to a core business risk management & assessment - with timely reminders of the causes / impact of Stuxnet, Solarwinds and similar prior attacks. 🔑 There is best practice out there - use it. Some useful deep-dives into security frameworks, threat modelling, standards and practices - covering NIST, ISO, SOC, OWASP (and many more) along with useful refreshers on core cert, cryptographic and physical security & risk standards.   For those interested, I would highly recommend them, all able to be completed online in a self-paced manner using some helpful online training materials to get into the detail of the core concepts.   #AWS #DevOps #CyberSecurity #CloudComputing #Leadership #TechSkills

167

9 Comments